You can't. Crypto is done on a separate piece of silicon and dumping memory or NAND will get you nothing but scrambled bits. From a cold boot user data is not

You can't. Crypto is done on a separate piece of silicon and dumping memory or NAND will get you nothing but scrambled bits. From a cold boot user data is not loaded into memory until a correct pin has been entered once, and since A5 nobody has managed to compromise their bootchain it is not really viable to exploit either. http://blog.cryptographyengineering.com/2014/10/why-cant-apple-decrypt-your-iphone.html http://blog.cryptographyengineering.com/2014/10/why-cant-app... To break such a system is not impossible, but would require some heroic effort, even nation states would probably resort to some side channel or the proverbial five dollar wrench.